Netgear DG632 Router Authentication Bypass Vulnerability

Product Name: Netgear DG632 Router Vendor: http://www.netgear.com Date: 15 June, 2009 Author: [email protected] [email protected] Original URL: http://www.tomneaves.co.uk/NetgearDG632AuthenticationBypass.txt Discovered: 18 November, 2006 Disclosed: 15 June, 2009 I. DESCRIPTION The Netgear DG6...

Zervit Webserver 0.3 Remote Denial Of Service Exploit

No description provided by source. import socket import sys print "------------------------------------------------------" print " Zervit Webserver 0.3 Remote Denial Of Service " print " url: http://zervit.sourceforge.net " print " " print " author: shinnai " print " mail: shinnaiatautisticidotor...

ConnX Detection

This host is running ConnX. OpenVAS Vulnerability Test $Id: ConnXdetect.nasl 5723 2017-03-24 15:46:34Z cfi $ ConnX Detection Authors: Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GN...

DNS Tunneling Client Detection (port 80 non-TCP)

Binary data 4969.prm...

TinX CMS < 3.5.1 SQLi Vulnerability - Active Check

TinX CMS is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...

Linux/x86 - bind '/bin/sh' to 31337/tcp - 80 bytes

No description provided by source. / linux/x86 bind '/bin/sh' to 31337/tcp - 80 bytes - izik [email protected] / char shellcode = "\x6a\x66" // push $0x66 "\x58" // pop %eax "\x99" // cltd "\x6a\x01" // push $0x1 "\x5b" // pop %ebx "\x52" // push %edx "\x53" // push %ebx "\x6a\x02" // push $0x2 // /...

Squid < 3.1 5 - HTTP Version Number Parsing Denial of Service

!usr/bin/perl -w Reference: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-0478 https://www.securityfocus.com/bid/33604/discuss $$$$$This was strictly written for educational purpose. Use it at your own risk.$$$$$ $$$$$Author will not bare any responsibility for any damages...

HSPell 1.1 - 'cilla.cgi' Remote Command Execution

!/usr/bin/perl use IO::Socket; print q HSpell v1.1 Command Execution Exploit Theres a 1000 ways to improve this exploit, but I really couldn't be fucked with it. Made By ZeN http://dusecurity.com/ http://darkcode.me/ ; $host = 'site.com'; $port = '80'; $path = '/cgi-bin/cilla.cgi'; ShellMe: print...

MediaWiki Detection (HTTP)

HTTP based detection of MediaWiki. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.900420";...

Packeteer PacketShaper Web Denial of Service

The remote host is affected by a denial of service vulnerability. Description : Packeteer PacketShaper is susceptible to a denial of service vulnerability in the web management interface. Requesting a specific URL will cause the device to reboot. The user must first log in but even read-only acce...

Airspan ProST WiMAX Device Web接口验证绕过漏洞

BUGTRAQ ID: 28122 CNCAN ID:CNCAN-2008030701 Airspan的WiMAX基站和终端用户设备AS.MAX家族包括对住宅和移动因特网接入、企业数据网络和语音IP的支持。 Airspan ProST WiMAX设备存在验证绕过问题，远程攻击者可以利用漏洞未授权访问受此漏洞影响设备，修改任何配置。 目前没有详细漏洞细节提供。 Airspan ProST 目前没有解决方案提供，不过可限制80/tcp端口的过滤来降低威胁： http://www.airspan.com/productswimaxcustpremProST.aspx...

Re: Logs visualization in WS_FTP Server Manager 6.1.0.0

Luigi Auriemma wrote: WSFTP Server Manager aka WSFTP WebService is the web administration interface of the IpSwitch WSFTP server and runs by default on port 80. This also affects the Ipswitch What's Up Gold 11.03 web server...

FS4104-AW VDSL Device (Rooter) - GoAhead WebServer Disclosure

-------------------------------------------------------------------------------- WebServer powered by goahead WEBSERVER Vulnerability on : FS4104-AW - Full-Service VDSL Device exemple : IP : 81.240.1.1 to 81.240.1.254 / port : 80 exploit : =http://ip/goform/QuickStartc0 =source =password disclosu...

3Com WIFI router remote administration vulnerability.

3Com 3CRWER100-75 is a wireless cable/DSL router widely used here, in israel. The router has a web management interface in it's port 80 available from inside the network. When the administrator assign a virtual server to port 80 In the management web filled under the firewall tab and the line is...

Design/Logic Flaw

The Aztech DSL600EU router, when WAN access to the web interface is disabled, does not properly block inbound traffic on TCP port 80, which allows remote attackers to connect to the web interface by guessing a TCP sequence number, possibly involving spoofing of an ARP packet, a related issue to...

CVE-2007-4733

The Aztech DSL600EU router, when WAN access to the web interface is disabled, does not properly block inbound traffic on TCP port 80, which allows remote attackers to connect to the web interface by guessing a TCP sequence number, possibly involving spoofing of an ARP packet, a related issue to...

CVE-2007-4733

CVE-2007-4733 describes a vulnerability in the Aztech DSL600EU router where, even when WAN web UI access is disabled, inbound connections to TCP port 80 can reach the web interface by guessing the TCP Initial Sequence Number, potentially aided by ARP spoofing. This is a remote-access risk exploit...

CVE-2007-4733

The Aztech DSL600EU router, when WAN access to the web interface is disabled, does not properly block inbound traffic on TCP port 80, which allows remote attackers to connect to the web interface by guessing a TCP sequence number, possibly involving spoofing of an ARP packet, a related issue to...

Fusetalk SQL injection submission.

Greetings, I have found sql injection in FuseTalk 2.0 during a legitmate audit. Resending because I got MIME errors to [email protected]. I have exchanged emails with [email protected] who needed more information when I originally sent an email to [email protected] Operating...

Design/Logic Flaw

3Com TippingPoint IPS allows remote attackers to cause a denial of service device hang via a flood of packets on TCP port 80 with sequentially increasing source ports, related to a "badly written loop." NOTE: the vendor disputes this issue, stating that the product has "performed as expected with...